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Abstract 

Availing services provided via the Internet became 
a widely accepted means in organising one's life. 
Beside others, eLearning goes with this trend as 
well. But, while employing Internet service makes 
life more convenient, at the same time, it raises 
risks with respect to the protection of the users' pri- 
vacy. This paper analyses the attitudes of eLearn- 
ing users towards their privacy by, initially, point- 
ing out terminology and legal issues connected 
with privacy. Further, the concept and implemen- 
tation as well as a result analysis of a conducted 
study is presented, which explores the problem 
area from different perspectives. The paper will 
show that eLearning users indeed care for the pro- 
tection of their personal information when using 
eLearning services. However, their attitudes and 
behaviour slightly differ. In conclusion, we pro- 
vide first approaches of assisting possibilities for 
users how to resolve the difference of requirements 
and their actual activities with respect to privacy 
protection. 

1 Introduction: Why Should We 
Answer the Title Question 

When watching at the developments of iriforma- 

tion technology, one can state that the previous 
years were characterised by a rapid upturn of the 
new and advanced possibilities in the field of com- 
munication. However, being busy with getting 
known the nice features of the new technologies 
we forgot to care about secondary consequences. 
These imply the risks in terms of privacy which 
are very much connected to the new freedom 
that the communication means deliver. But, not 
only the technical options for communication have 
changed. This development had also quite an in- 



fluence on our social backgrounds as well as on 
our culture of living. Especially, the last mentioned 
aspects are important to consider when designing 
next generation eLearning platforms the character- 
istics of which will be stronger oriented on collabo- 
rative, informal and community-oriented learning 
scenarios. 

This paper analyses the current attitude of eLearn- 
ing users towards their privacy when acting on 
the Internet and, above all, when working with 
eLearning systems. Thereby, we understand 
eLearning as comprising all learning applications, 
which are reachable and usable via the Inter- 
net. Those learning applications may be designed 
for cooperative, collaborative, or self-determined 
learning. Especially, in multi-user eLearning en- 
vironments we have to distinguish relevant tasks 
like learning, teaching and organising, which are 
represented by different roles: the learner, the tu- 
tor, the mentor, the author, and the administra- 
tor. The interplay of the mentioned roles requires 
an exchange of personal information, which might 
be intended but also unintended since each indi- 
vidual has own feelings with respect to protecting 
his/her privacy or disclosing specific information, 
respectively. 

Given this context, we formulated questions such 
as: How is privacy being perceived in eLearning 
situations? Do we have to consider privacy is- 
sues when designing eLearning systems, and if so 
- which way has it to be done? 

First, we will start the discussion by reflecting def- 
initions of privacy as well as contrasting this term 
to related terminology. In order to further moti- 
vate the discussion on this topic, we will refer to 
legal regulations, which exist to protect the users' 
privacy in the informational society. After that, we 
will analyse our survey and its results in detail as 
well as setting them in contrast to related studies. 
Following, we will conclude the discussion by pre- 



senting according consequences for the design of 
collaborative eLearning environments. 

The aim of this paper is to approach the wishes 
and requirements of eLearning users with respect 
to their privacy preferences. Therefore, eLearn- 
ing users from all over Europe got the possibility 
to participate in the survey, which addressed the 
above-indicated issues. 



2 Terminology and Motivation 

2.1 Privacy and Informational Self- 
Determination 

People often do not associate the same meaning 
with the term privacy. That is why we attend to a 
discussion about the term's proximity that further 
relates to informational self-determination as well 
as to security. 

In the waning years of the 19th century and begin- 
ning of the 20th century, for the first time, privacy 
became an issue of legal considerations. So, the 
judges S.D. Warren and L.D. Brandeis have given 
privacy a legal base by defining it as "the right to 
be left alone" lRos01| . In 1967, A.E Westin for the 
first time brought informational privacy into focus 
by reflecting his perception of privacy as "the claim 
of individuals, groups or institutions to determine 
for themselves when, how and to what extend in- 
formation about them is communicated to others", 
which means that there should be the possibility to 
control the access to private information. Thus, in 
a result of increased data processing and the pos- 
sibility to store more and more information, infor- 
mational privacy had encoimtered the technologi- 
cal progress and the associated risks. 

Beate Rler [RoesOl] determines a spectrum of three 
privacy classes LRosOlJ : 

• Local privacy means the protection of rooms 
and areas. 

• Privacy of actions and behaviour implies a free 
choice of, e.g., confession and clothing, but 
also protection against heteronomy. 

• Informational privacy focuses the protection 
of information about oneself, opinions about 
others, and communications with other per- 
sons. 

Below, we especially refer to the class informational 
privacy when addressing privacy. 



Often, the term privacy is used in association with 
security. However, while security means the pro- 
tection of all confidential data and information, pri- 
vacy comprises the level of desired security of a 
person's own data and information. We explic- 
itly state "level of desired security" since acting 
in the informational society is always a trade-off 
between privacy and the provided opportunities. 
Thus, e.g., to get a bank credit or medical care one 
has to disclose personal data in order to be able to 
participate in the social life. 

2.2 Protection of Privacy on the Internet 
and within eLearning 

When turning to practice, a series of problems 
come into sight, which is connected with the pro- 
tection of privacy on the Internet: First, users of 
online services are often not able to recognise that 
data about themselves is collected. Often, they 
have insufficient knowledge about the data pro- 
cessing procedures and, thus, about the concrete 
purpose of information gathering done by service 
providers. Such procedures allow for associating 
the given data with databases of different com- 
panies to create a global profile or a pattern of 
behaviour of that person. For example, cookies, 
which are used to store session data, can collect in- 
formation over a long period. Although cookies 
are stored on the person's computer, this informa- 
tion can be requested from the initiator every time 
the user connects to the according service. On that 
basis, it becomes easy for the service provider to 
analyse the behaviour of the user on the Internet. 
Second, the "Internet does not forget", i.e. once in- 
formation had been digitised and stored on a net- 
worked storage it becomes hard - if not even im- 
possible - to get it really deleted. 

In order to solve those problems, different possi- 
bilities help to control the disclosure of personal in- 
formation to service providers and other interested 
institutions: One of the possible countermeasures 
represents the use of anonymisers, which conceal 
the IP address of the user 's computer and hide the 
type of transmitted data, e.g. JAP or Tor 0. An- 
other approach consists in special software (such 
as CookieCookerll) that exchanges the user's cook- 
ies with those of other users. Further, technolo- 
gies of privacy-enhancing identity management, 
like the ones currently being developed in PRIME 
0, assist the users in managing their partial identi- 

^http: / /jap.inf .tu-dresden.de 
^http: / /tor.eff .org/index.html.en 
''http: / /www.cookiecooker.de/ 
*https: / /www.prime-project.eu/ 



ties when using different web services IPH06I . 

While analysing the field of privacy in eLearning 
we encountered that there is a special situation: In 
order to being able to optimally support the learn- 
ing processes it is inevitable to indicate informa- 
tion that is personal to the users. This is especially 
true when collaboration is one of the learning envi- 
ronment's paradigms for knowledge building and 
exchange. In such a case, group awareness is one 
of the most important aspects in order to work ef- 
ficiently together with other participants IKBG04 1 . 
Depending on who the interaction partner is, the 
users are willing to disclose their real or their nick- 
names, information about relations to other partic- 
ipants, and their level of performance (grades in 
tests, certificates). Besides collaboration, person- 
alisation and adaptation of learning environments 
require to indicate privacy-relevant information as 
well. 

In order to sum up the problem analysis, we need 
to mention that quite a lot of different personal 
data plays an important role within eLearning en- 
vironments depending on the actual context and 
the interaction partners. Nevertheless, disclosing 
all of the personal data to everyone might advance 
risks connected to biased environments, profiling 
etc. 

2.3 Approaches of Legal Regulations 

In the frame of legal regulations, different ap- 
proaches exist, which are outlined in the follow- 
ing. First, we would like to mention the guide- 
lines of OECD, the Organization for Economic 
Co-operation and Development, compiled in 1980 
IIOECOSl . These guidelines represent recommen- 
dations of how to protect sensitive data (e.g. by 
limiting data collections, indicating the purpose of 
data collection, and by limitation of use). A fur- 
ther aim was also to guarantee secure data traffic 
to other states than the information origin. The 
OECD guidelines formed the fundament for the 
Data Protection Directive of the European Parlia- 
ment and of the Council (1981). Its objective was 
to regulate the handling of personal information 
for almost all European countries based on deter- 
mined principles with respect to confidentiality, se- 
curity, and transparency. The unification of all data 
protection laws of the countries of the European 
Union is aimed by the implementation of the Con- 
vention for the Protection of Individuals with re- 
gard to Automatic Processing of Personal Data of 
the Council of Europe (1995) IIEPC95I . Further, we 
would like to point out an event in Germany called 
"Volkszhlungsurteil" IVZU83J : In 1983, a popula- 



tion census should take place by collecting a large 
number of personal data (such as telephone num- 
ber or place of work etc.). Such kind of infor- 
mation collection intended by the "Volkszhlung- 
surteil" [VZU83J was judged as violation of the hu- 
man rights. Therefore, for the first time, the right 
for informational self-determination became an ac- 
cepted claim in a European country. 

In 2003, a representative survey addressing the at- 
titudes of the European citizens [SdM03J reflected 
that 61% of the respondents did not hear about the 
existence and objectives of data protection laws of 
the EU while only 31% responded that they know 
about the laws. 70% of the respondents expressed 
their opinion that people's awareness about per- 
sonal data protection in their country is rather low. 
Nevertheless, almost half of the respondents per- 
ceived a high level of personal data protection pro- 
vided by the law in their country. This means, that, 
in 2003, about two-thirds of the European citizens 
did not know which rights and possibilities with 
respect to protecting their privacy they hold. How- 
ever, they feel that there is a high level of data pro- 
tection in their countries without knowing what 
concrete effects this implies. 

Notwithstanding of such regulations, privacy 
rights are going to get restricted more and more: 
Providers of telecommunication and information 
services are obligated to collect and store data 
about connections and location for a wide range of 
kinds of electronic data. Thus, caring for one's pri- 
vacy and informational self-determination is not 
just an issue of legal regulations but also a personal 
concern of every user him/herself. 



2.4 Conclusions from the Analysis of 
the Problem Area 

To turn to the original discussion area - privacy 
in eLearning - it has to be determined that tak- 
ing care for privacy is a personal concern and 
should be self-determined by the user him/herself. 
Thus, the designs of learning environments have 
to correspond to legal regulations and the users' 
requirements, accordingly. Consequently, refer- 
ring to local privacy, every participant of a learn- 
ing environment should have an own space (cf. 
the room metaphor) where he/she can adjourn 
to work on tasks without disturbance by others. 
In addition, privacy of actions and behaviour can 
be supported, e.g., by providing sets of different 
possibilities for self-determined learning, teach- 
ing and creating material. Informational privacy 
can be ensured by appropriately protecting stored 



private information and providing the owner of 
that information the possibilities to regulate its 
disclosure. A further approach to enable infor- 
mational privacy consists in offering mechanisms 
for pseudonymity or anonymity in the learning 
environment. Teltzrow and Kobsa even suggest 
a browsing system, which advances current ap- 
proaches by integrating comprehensive explana- 
tions and options for privacy measures [TK04]. 
Thereby, they state that privacy is not a global atti- 
tude, instead it depends on the actual context, i.e. 
the user has to rethink and decide for each new do- 
main his privacy settings. 

3 Research Approach and Anal- 
ysis of Survey Results 

The motivation section has shown that privacy is 
of particular importance on the Internet and other 
parts of the digital world. Therefore, this sphere of 
privacy requires research by examining as well as 
by inducing studies, which address this problem 
field. 

Our recherch yielded that privacy-related research 
studies for the field of eLearning exist only of a 
very poor number. In order to being able to cre- 
ate an objective image of anticipatory results of 
our own focused approach as well as being able 
to impartially compare the results with other stud- 
ies, we introduce few relevant studies that direct 
on privacy and data protection albeit not necessar- 
ily on eLearning. A problem we found confronted 
with was that the studies addressing this problem 
area are not up-to-date (some of them were car- 
ried out about 8 years ago). However, in order to 
have a broader focus, we chose studies for our dis- 
cussions, which seemed to be either good-practice- 
representative for the European Union or which 
provided a first impression of a similarly intended 
mirror image. This decision was further driven 
by the recognition that other studies that are more 
state-of-the-art do simply not exist or provide just 
too little information. 

We conducted a study with the special focus on a 
privacy related examination of eLearning. For that 
reason, we created an online survey especially in- 
tended for analysis of the behaviour and attitudes 
of European eLearning users regarding informa- 
tional privacy. Accompanying, we drew compar- 
isons with the results of related studies where it 
was feasible. 

Following, our considerations start with a descrip- 
tion of the survey characteristics themselves. Then 



we present the central questions and the results 
of the survey as well as an analysing comparison 
with related research studies. The examination 
will be completed with a summarised conclusion. 

3.1 Survey Methodology and Sample 
Characteristics 

The survey was conducted with focus on eLearn- 
ing users and their privacy needs and require- 
ments. Therefore, in order to reach the according 
stakeholders, i.e. European eLearning users, we 
decided to create an online survey. Moreover, this 
decision was also driven by the aspect that the tar- 
get group should be qualified for work with PCs 
and the Internet, which is a fundamental require- 
ment for eLearning. Information about the survey 
and the conditions for participation had been pub- 
lished in blogs, discussion forums and web sites. 
Participation in the survey was anonymous since 
it is more probable that the respondents would an- 
swer more honest and imforced than in an identi- 
fiable environment. An online survey that is self- 
determined, i.e. without interviewer or supervisor, 
needs to be comprehensible and it has to consist of 
easily to interpret questions and tasks. In order to 
test and to configure the questionnaire for release, 
it had been pre-evaluated. 

Since the survey was open for public access, we 
are not able to determine a rate of responses. Con- 
cerning the survey methodology, the results are 
rather a cluster sample than a statistical repre- 
sentative one for Europe. That means that there 
are clusters of participants from specific regions 
while we could not reach people from other re- 
gions who, consequently, could not take part in the 
survey. Therefore, the results of the survey rep- 
resent the attitudes only of the respondents and 
should rather be understood as a tendency for the 
European eLearning users. 

The online survey started on 25th November 2005 
and ended on 13th January 2006. We got 106 re- 
sponses from 18 different European countries (cp. 
Figure [ij. 

Regarding the gender distribution of the sample, 
66% of the respondents were male and 28% were 
female. The respondents comprised all age groups 
from 15 to 64 years; but most of them are be- 
tween 25 and 34 years. The highest completed ed- 
ucational level (we used the graduation model of 
Great Britain) of the respondents is composed in 
the following way: the majority of the respondents 
hold a university degree (32%) or have already 
graduated from university (51%). Thus, most of 




Figure 1: Regional distribution of the survey par- 
ticipants 

the respondents are part of the scientific commu- 
nity. 

The conducted survey is attended to our central 
questions divided into five problem fields: 

• General attitudes, 

• Dependencies of privacy concerns, 

• Level of comfort with respect to stating per- 
sonal information while online, 

• Demands and provisions of personal informa- 
tion, 

• Past behaviours and further attitudes. 
3.2 General Attitudes 

One of the first steps of the online survey was to 
ask about the feelings regarding the security of 
own personal data while using the Internet (cp. 
Figure |2]l. About 74% of the respondents replied 
that they are somewhat or very concerned. In con- 
trast, only 7.5% are not concerned. 



Somewhat concerned: 45,3% 




Figure 2: Distribution of levels of concern regard- 
ing the protection of privacy data 



Union called Eurobarometer 60.0 ISdM03l , consid- 
ered the field of personal information and privacy 
in the information society. The Eurobarometer in 
general represents one of the most important opin- 
ion surveys of the European Union. About one 
thousand inhabitants of each European country 
take part in these surveys, every time. 

The Eurobarometer 60.0 of year 2003 indicated that 
about 60% of the respondents were very or fairly 
concerned of the safety of their privacy when pri- 
vate or public organisations store personal infor- 
mation. 64% of the respondents "tended to agree 
that they were worried about leaving personal in- 
formation on the Internet". The participants were 
also asked if they should be informed of the rea- 
sons why organisations collect personal data and if 
organisations intend to share such data with other 
organisations. The vast majority of the respon- 
dents (91%) tended to agree to this question. This 
statement perfectly reflects the desire for informa- 
tional self-determination of the citizens of the Eu- 
ropean Union. 

With respect to the socio-demographic analysis, 
there were little indications that older people and 
those with a higher level of education were more 
worried about these issues. But, a distinction be- 
tween the genders could not be determined. 

Misuse of sensitive personal data as well as adap- 
tive advertising on the Internet very much in- 
creased in the last years. Accordingly, another rel- 
evant study by Cranor et al. IICRA99II surveyed the 
concrete needs and raised fears of Internet users, 
in 1999. Their research focused on acceptance tests 
and evaluation of the P3P design where P3P 
should improve the awareness of the user regard- 
ing privacy terms of web sites. Thus, they con- 
ducted an online survey with participants of the 
DRI (Digital Research Inc.) Family Panel. About 
500 members from the United States took part in 
that survey. Cranor et al. draw comparisons to a 
study of Westin and Harris [H&AW981, which was 
published in 1998 with a representative sample of 
citizens from the USA. 81% of the respondents of 
the sample of Westin and Harris and 87% of the 
Cranor et al. sample specified that they were very 
or somewhat concerned about threats to their pri- 
vacy while online. Cranor et al. explained the dis- 
tinction of the results by the different compositions 
of the sample groups. The respondents of the Cra- 
nor survey were of higher level of education and 
possessed more Internet experiences. So, the Cra- 
nor results could be understood as an indicator of 
the "future Internet user population". 



Already, in 2003, a survey addressing general opin- 
ions and attitudes of the citizens of the European 



^ http : / / www. w3 .org/P3P/ 



The results of the indicated surveys show that 
there are concerns regarding the safety of personal 
information and data traces on the Internet. Not 
only a few people doubt that their data is well pro- 
tected on the Internet, instead it is the majority. The 
findings of our study corroborate this conclusion 
also for the asked eLearning users. 

3.3 Dependencies 

The considerations about general attitudes have 
shown that especially experienced Internet users 
are most concerned about loosing their privacy. 
This section will examine if there are special de- 
pendencies that influence the level of concern. 

The first question we address is: Do privacy inter- 
ests regarding the online world depend on special 
knowledge in this field? In order to get an answer 
on this question, we gave the participants four dif- 
ferent terms where three of them were directly re- 
lated to the field of privacy. The fourth term was an 
invented acronym and it was used as check term. 
The respondents of our survey were asked to judge 
their knowledge of privacy issues by indicating 
their knowledge of the underlying concepts of the 
terms. The results showed that 40% of the respon- 
dents could explain all three correct terms and 12% 
did not pass the check term. It was obvious that the 
participants with little knowledge of privacy con- 
cepts tended to choose the statement "somewhat 
concerned" (78%). Whereas the group of respon- 
dents with high knowledge in this area tended to 
the extremes by choosing the statements "not con- 
cerned" (10%) and "very concerned" (31%). 

A further relevant fact of our survey is the exami- 
nation of dependence of privacy concerns on roles. 
In the survey, we referred to and explained five 
different eLearning related roles. The respondents 
should choose which of the following roles they 
most frequently hold: 

• learner, 

• tutor (adjustment of teaching material and su- 
pervision of training), 

• mentor (experienced advisor for individual 
support), 

• author (preparation of teaching material for 
Internet presentation), 

• administrator (data and user management as 
well as assignment of user rights). 

The analysis of the results yielded that 36% of the 
participants classified themselves as learners, 15% 



as tutors, 5% as mentors, 26% as authors, and 6% 
as administrators. The comparison of the accord- 
ing roles with the degree of concern shows that the 
most concerned group is that of tutors. 87.5% of 
them were somewhat or very concerned followed 
by mentors (80%) and learners (71.1%). Admin- 
istrators showed as few concerns (66.6%) as au- 
thors (67.9%). In fact , in order to allow for, e.g., 
reasonable adjustment of teaching material by tu- 
tors or finding suitable learning groups, informa- 
tion about learners are of special interest. How- 
ever, their level of solicitude with respect to weak- 
ening their privacy is rather low. The reason for 
this may be due to past grinded in habits, i.e. they 
most probably expect that other people need their 
data without thinking about the aims of data gath- 
ering. An aspect, which could not be examined in 
the scope of this study but which might have to be 
considered, consists in the possible dependence of 
concern for privacy on the actual learning context: 
i.e. learning for the job or for leisure. According 
to a study by Kobsa IPK04L the perception of pri- 
vacy concerns can vary, i.e. in job related terms 
(like further education or an employment as a tu- 
tor), the level of privacy concerns is lower than in 
leisure related terms. Furthermore, during analy- 
sis of this study, we found interesting that only 14 
learners and two authors specified their role as the 
only role they ever hold. All others sometimes or 
frequently are consigned to other tasks or roles, i.e., 
they mostly do not possess a certain role but often 
hold nearly all of them. Obviously, this diffuse role 
structure makes it difficult to clearly reason how 
the dependence of the concerns regarding privacy 
on the Internet on role assignments looks like. 

The dependency of origin of the respondents and 
their level of solicitude regarding informational 
privacy is a further interesting point of our sur- 
vey analysis. Admittedly, even if it is not possible 
to draw conclusions about single countries on ba- 
sis of the results of our own survey, it is possible 
by regions of Europe. That way the results turned 
out to be as follows: the concerns regarding pri- 
vacy increased from Southern and Eastern Europe 
(about 50% to 64% were very or somewhat con- 
cerned) to Northern and Western Europe (where 
about 80% of the according participants were very 
or somewhat concerned). Thereby, an interesting 
point is the fact that the same characteristics can be 
found in the concentration of Internet connectivity 
of households IISCFF05 1. Thus, in 2005, the Eastern 
and Southern European countries had the lowest 
Internet concentration (about 20% to 30%). In con- 
trast, the Northern and Western European coun- 
tries had the highest Internet concentration (about 
65% to 85%), whereby the average rate of all the 25 



European countries was 48%. Hence, we noticed 
a direct proportionality between the privacy con- 
cerns and the Internet concentration: an increased 
Internet concentration is directly connected to a 
higher level of concerning with respect to informa- 
tional privacy regarding the survey results. 

3.4 Convenience Stating Personal In- 
formation 

Typically, many different types of personal infor- 
mation are transferred via the Internet. In a next 
step we want to examine the sensibility of personal 
information, i.e. we want to clarify which kind of 
personal data requires more protection in compar- 
ison to another. 
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Figure 3: Proportion of respondents (in percent) 
who feel always or usually comfortable providing 
specific personal information 1CRA991 

As Cranor et al. already proved in IICRA99 1, the 
level of comfort indicating personal information 
on web sites across various types of data varies 
very much (cf. Figure |3): Accordingly, providing 
information about preferences, such as favourite 
TV show or snacks, is always or usually comfort- 
able for the majority (82% and 80%) of the inter- 
viewees. Similarly, many persons feel comfort- 
able when providing their e-mail address (76%), 
their age (69%), and information about their com- 
puters (63%). In contrast, revealing direct identi- 
fying information, i.e. full name and postal ad- 
dress, is for half of the respondents not at ease. 
In large part, the respondents worried to provide 
medical information and information about their 
income (only 17%-18% felt always or usually com- 
fortable to provide such information). Only 11% of 
the respondents were always or usually willing to 
provide their telephone number on web sites and 
merely 3% would provide their credit card num- 
ber without doubts. Regarding the type of infor- 
mation which serves as contact possibility (tele- 
phone, e-mail address and postal address), there 



are big differences in the level of comfortableness 
when the persons are asked to indicate them. For 
the vast majority, it poses no problem to provide 
the e-mail address (76%), but supplying the tele- 
phone number is comfortable for only 11% of the 
respondents. Already in 1991, Westin [ H&AW91I 
discovered this issue: He concluded that the level 
of inconvenience increases the less possibilities an 
individual has to avoid an imdesired communica- 
tion. 

The results of our survey mirror showed an equal 
situation: credit card number, telephone number, 
income and postal address are uncomfortable to re- 
veal on the Internet, whereas statements about the 
age are most comfortable. The indication of school 
marks is almost as uncomfortable as the postal ad- 
dress, but showing information about school grad- 
uation is considered less uncomfortable. 

These results, which represent a mirror of the 
users' behaviour w.r.t. indicating different per- 
sonal information on the Internet, were used to 
compare with ratings applied especially to the 
eLearning domain. The results are indicated in 
Table [T] Hence, one can recognise that the re- 
spondents more often would reveal personal data 
within the eLearning context than in the Internet 
context, albeit with only slight deviations. How- 
ever, there is one exception regarding the answers 
given on "Personal e-mail address": There ap- 
peared a rather large distinction between the In- 
ternet and eLearning contexts. In addition, the re- 
spondents regard revealing the e-mail address as 
more comfortable than the postal address. Addi- 
tionally, the indication of telephone numbers is re- 
garded as especially uncomfortable. 



3.5 Demands and Provisions of Per- 
sonal Information 

After learning about the users' attitudes regarding 
the indication of different kinds of personal infor- 
mation in the online world, we like to set those 
findings in contrast to the question what kind of 
information is really needed in an eLearning envi- 
ronment. For that reason, the survey participants 
were asked to decide what kinds of information 
about other participants they would need for an 
optimal work depending on the own role as well 
as on the other roles. Moreover, the participants 
should also decide which of the following kinds of 
personal information they think that other partici- 
pants would need for an optimal work: 

• e-mail address or telephone number. 



Information 


Internet (average rating) 


eLearning (average rating) 


Credit card number 


6,66 




Private telephone number 


6,48 


5,99 


Income 


6,31 




Postal address 


5,98 


5,59 


School marks 


5,48 


5,19 


Personal e-mail address 


5,07 


3,46 


Favourite Internet store 


4,88 




Occupation 


4,52 


3,99 


Hobbies 


4,37 


4,3 


Information about your PC 


4,18 


3,69 


School qualification 


4,06 


3,56 


Age 


3,29 


3,01 



Table 1: Average rating of various personal information in a scale of 1 (very comfortable) to 7 (very 
uncomfortable) 



• interests, 

• postal address and date of birth, 

• competences & completed educations, 

• automatically recorded activities within the 
eLearning application, 

• name and picture of the person as well as 

• information especially related to learners: 

- learning aims & motivation, 

- preferred presentation of teaching mate- 
rial, and 

- achieved scores in eLearning tests. 

The responses indicated that, in order to establish 
an optimal work situation, most of the participants 
woiild provide more personal information as they 
would demand from others. The reason for this 
interesting result may be seen in the experiences 
the participants already had attained during their 
work with eLearning environments: as we will see 
below, efficient collaboration and cooperation are 
only possible if the users are aware of each other. 

Out of the above-mentioned items, the participants 

indicated learning targets, competencies and con- 
tact information as most important information 
about a learner. The most relevant facts about the 
other roles are a visual impression of the respec- 
tive person, information about how to contact this 
person, and his/her competencies. However, there 
are also discrepancies: According to the results of 
the survey, learners provide their learning targets 
more likely to tutors than to other learners or au- 
thors. That behaviour may originate in a possi- 
ble need for adjustments of learning material or 



the kind of mentoring by the tutor, respectively. 
As mentioned above, the majority of the respon- 
dents do not take only one single role in an eLearn- 
ing environment. Instead, sometimes they possess 
even all of the roles. So, the mutual trust in these 
roles is afflicted. A potential solution to circum- 
vent this problem could be the usage of different 
pseudonyms/identities when changing a role. 

As already mentioned, in order to allow for co- 
operative teamwork, a certain degree of group 
awareness is necessary. Users need to know that 
other people are available for interactions and they 
should know who are those people. A study, 
which was concerned with analysing users' pri- 
vacy attitudes in eLearning [Kettel et al.], started 
with recognising that a large number of users set 
themselves invisible for the virtual community. In 
the beginning of the study, those users were not 
willing to reveal any personal information to other 
users. However, they were very interested in gath- 
ering information about the others. In order to 
encourage the users to disclose personal informa- 
tion, the survey organisers set up the rule that 
each user gets to see only those kinds of informa- 
tion about other participants that they reveal about 
themselves to the others. After this rule was estab- 
lished, the users disclosed more information about 
themselves and, thus, they fostered the formation 
of the learning community. After having an insight 
into the online activities of the other participants, 
the participants were asked if they assess it advan- 
tageous being able to watch those activities. 53% of 
the participants responded with "yes" while 12.5% 
of the participants saw no benefit. Further, 87.5% 
agreed that the potential advantages of sharing 
personal information outweigh the potential risks 
for privacy. Therefore, the vast majority of the par- 
ticipants would make a trade-off in favour of the 



awareness of the community. 

Looking at the results of our own study and the 
study of Kettel et al., we can conclude that infor- 
mation about other participants of an eLearning 
environment could improve the behaviour of the 
whole group. However, it also influences the in- 
formational privacy of the individual. 



3.6 Past Behaviour and Further Atti- 
tudes 

In the last block of survey questions, we ap- 
proached the research question if respondents' be- 
haviour on the Internet matches with their privacy 
concerns. The majority of the respondents of our 
survey indicated that they were very or somewhat 
worried about the safety of their informational pri- 
vacy. However, do they also try to protect their 
personal data stored on their computer? 

The participants were asked if the computer they 
use for working with the Internet has firewall and 
virus scanner software installed. As expected, 
the respondents who are not or less concerned 
do less provide for a risk (87.5%) than very con- 
cerned respondents (100% of those participants 
have installed a firewall and 93.4% of them - a 
virus scanner). Nevertheless, the majority of the 
respondents generally use such kind of software. 
Another aspect was to learn about the partici- 
pants' practice of regularly changing important 
passwords. Thus, we asked the respondents if they 
had changed their important passwords within the 
past six months. Again, we recognised that with 
an increase of the users' concerns also the fre- 
quency of password changes increased. Thus, only 
37.5% of the respondents who are not worried in- 
dicated to do it. In contrast, 53.4% of the very 
concerned respondents pointed out to care for reg- 
ular password changes. However, the relatively 
small amount of only half of the very concerned re- 
spondents could be a result of the difficulties con- 
nected with memorising safe passwords for vari- 
ous applications. Another question addressed the 
users' attitude of making wrong statements in on- 
line registrations to protect their privacy. 80% of 
the participants responded to this question with 
"yes". Additionally, there was a small increase 
from the proportion of the not concerned respon- 
dents (75%) to one of the somewhat and very con- 
cerned respondents (about 82%). Further, the re- 
spondents ranked the trust in the provider of a 
website among the most important facts when they 
are asked to fill in an online registration. Follow- 
ing, the participants indicated the worthiness of 



the registration's benefits as well as the indication 
of a reasonable purpose of gathering the personal 
data. A further relevant aspect is the use of dif- 
ferent e-mail accounts. At this point, we noticed 
a huge variance of behaviour between the differ- 
ently concerned people. Thus, while 93.3% of the 
very concerned respondents use different e-mail 
accounts for several spheres of life, 62.5% of the not 
concerned participants do not separate their e-mail 
communications by different accounts. 

Turning back to the specifics of user behaviour in 
eLearning applications, we presented the partici- 
pants a set of different scenarios that might relate 
to privacy concerns in an eLearning environment. 
The survey participants should decide if they ei- 
ther favour or oppose the following functions of 
an eLearning environment: 

1 . Automatic notice of false test results to the tu- 
tor; 

2. Possibility to learn anonymously in an eLearn- 
ing environment; 

3. Creating several accoimts and nicknames for 
different courses; 

4. Logging on the computer does log the user in 
to further applications like e-mail account and 
eLearning application, at the same time; 

5. Getting access to a course, which has proper 
examples adapted to the user's education, job 
and previous knowledge, in return for the in- 
dication of personal data; 

6. Function to display which of the private 
and identifying data is disclosed to different 
groups of users and which of these data is hid- 
den from them; 

7. Private and identifying data is handed to 
other users only with the explicit permission 
of the owner; 

8. All private and personal data can be seen by 
everyone being part of the eLearning applica- 
tion. 

As shown in Figure |4] the functions (2) and (3) dis- 
play anonymous and pseudonymous learning and 
are favoured by about half of the respondents. In 
contrast, about 50% of the participants would ap- 
prove personalisation (5). Only few of the respon- 
dents endorse the functions (1) (34% of the respon- 
dents) and (4) (29%). The most important functions 
(6) and (7), which enable the learner to regulate 
his/her private information and thus to establish 
informational self-determination, are favoured by 




tioned, the study does not represent a statisti- 
cally representative sample for Europe since the 
analyses of demographic aspects of the responses 
showed that the majority of the survey's partici- 
pants is working in an academic environment. In 
addition, no equal distribution regarding the ori- 
gin countries could be achieved. Therefore, the re- 
sults of the survey represent the respondent's atti- 
tudes and should be understood as a tendency for 
the European eLearning users. 



Figure 4: Proportion of respondents (in percent) 
who favoured specific features 

about 75% of the respondents. Consequently, more 
than 95% of the participants disliked a form of data 
handling where everyone would be able to access 
all information. 



3.7 Summary 

In result of the survey analysis, we record that the 
sample of our study shows a high level of concern 
regarding informational privacy among eLearning 
users. Especially, the respondents who have good 
knowledge in privacy protection more often tend 
to the extremes of solicitude than others. Based 
on our results, evidence suggests that an increase 
of concern related to privacy can be noticed de- 
pending on the regionality the respondents resided 
in. Hence, respondents from Eastern and Southern 
Europe are less often worried of their privacy in 
comparison to the participants from Western, Mid- 
dle, and Northern Europe. In view of eLearning 
roles, tutors and mentors are the groups with the 
highest proportion of concerned respondents fol- 
lowed by the learners. Personal information is dif- 
ferently handled when revealed to others. Unprob- 
lematic data is, e.g., the age followed by the e-mail 
address. Most of the respondents avoid specify- 
ing their private telephone number in online com- 
munications. In an eLearning environment, the re- 
spondents indicated that they would provide more 
personal information about themselves than they 
would ask from other participants. With respect 
to the past behaviour, respondents who showed 
a high level of concern more often use possibili- 
ties to protect their personal data than users with 
fewer concerns. According to the analysis of the 
attitudes towards possible privacy protecting mea- 
sures, 95% of the respondents would particularly 
prefer control mechanisms, which allow access to 
personal data by others only with the explicit per- 
mission of the respective owner. As already men- 



4 Conclusion 

Most of the presented studies examine privacy 
within the context of the Internet. By comparing 
these studies with our own survey results, we were 
able to analyse if there are differences between the 
group of Internet users and the group of eLearn- 
ing users regarding their privacy needs. Thus, we 
could confirm that the majority of the respondents, 
which are eLearning users, see a need in protecting 
their informational privacy also within an eLearn- 
ing environment. However, in order to reasonably 
interact with each other, eLearning users are also 
aware of the necessity to disclose parts of their per- 
sonal information. 

Based on the results of the survey analysis, we ex- 
pect that future interests head for adaptive sup- 
port in order to optimise eLearning offers. There- 
fore, several personal data will be required and the 
eLearning users - especially the learners - will have 
to reveal data about themselves. In addition, ac- 
tivity data while using the eLearning offer is and 
will be stored, too. This trend will make it more 
difficult to protect private information. Users who 
care for their privacy must have the possibility to 
come to know of this as well as to determine by 
themselves how their personal trade-off between 
privacy and utilisation of services should look like. 
With the increase of the number of people using 
eLearning, the influence of social factors will in- 
crease, as well. Thus, a commimity the members 
of which want to learn together, will need mecha- 
nisms of competence rating, in order to being able 
to assess the interaction partners. In addition, com- 
munication, cooperation, and collaboration have 
to be easily usable. This also includes enhance- 
ments regarding the offered functionality of group 
awareness by respecting privacy issues. 

By researching needs and requirements regarding 
privacy, we have come to know, that privacy and 
informational self-determination are required or 
even demanded, respectively, by the majority of 
eLearning users. A next step will be to examine 



present eLearning environments with regard secu- 
rity and privacy regulations. Furthermore, our re- 
search team is currently developing an eLearning 
environment called BluES'n [BPLP05]. The further 
realisation of that platform is being carried out fol- 
lowing user-determined privacy regulations by re- 
specting and considering the results gained in the 
survey documented in this paper. 
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